[squid-users] Any obvious security issues in my squid.conf?

2017-05-29 Thread j m
I will be remotely accessing squid 3.5 for general web usage, using an encrypted browser-to-proxy connection, and username/password authentication.  I believe my config is reasonably secure as it's based off the default config, but I'm unsure of myself due to some confusion.  Are there any

Re: [squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
Yes, I sort of pieced together what I found online, which is probably dangerous.  I really need to become familiar with how exactly this works for security's sake if nothing else. From: Amos Jeffries <squ...@treenet.co.nz> To: j m <acctforj...@yahoo.com>; "squid-

Re: [squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
squid On 27/05/17 04:17, j m wrote: > I have a webserver and squid 3.5 running on the same Linux machine.  > The > webserver is actually part of shellinabox, so it's only for me to > access.  Shellinabox simply presents a terminal and login in a web > browser.  I want it to be ac

[squid-users] TCP_DENIED/407 accessing webserver on same machine as squid

2017-05-26 Thread j m
I have a webserver and squid 3.5 running on the same Linux machine.  The webserver is actually part of shellinabox, so it's only for me to access.  Shellinabox simply presents a terminal and login in a web browser.  I want it to be accessible only through squid for more security. shellinabox

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
called? If you use foxyproxy for firefox, you can use switchysharp for Chrome. Marcus On 25/05/17 09:00, j m wrote: > Thought I'd try getting this to work in Chrome too.  NOTHING I try makes it > work in Chrome.  Isn't running this from the Windows command line supposed to > work? >

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
Firefox on the same computer working just fine! From: Amos Jeffries <squ...@treenet.co.nz> To: j m <acctforj...@yahoo.com>; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Wednesday, May 24, 2017 5:15 PM Subject: Re: [squid-us

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-25 Thread j m
with? From: Amos Jeffries <squ...@treenet.co.nz> To: j m <acctforj...@yahoo.com>; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Sent: Wednesday, May 24, 2017 5:15 PM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what i

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-24 Thread j m
ay 24, 2017 7:57 AM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 24/05/17 13:44, j m wrote: > I'd like to set up a proxy on a home server so I can use it remotely > for web browsing; no filtering, nothing fancy, just a pass-through of

Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-24 Thread j m
<squ...@treenet.co.nz> To: squid-users@lists.squid-cache.org Sent: Wednesday, May 24, 2017 7:57 AM Subject: Re: [squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called? On 24/05/17 13:44, j m wrote: > I'd like to set up a proxy on a home server so I can use it remot

[squid-users] SSL bump, SSL intercept, explicit, secure proxy, what is it called?

2017-05-23 Thread j m
I'd like to set up a proxy on a home server so I can use it remotely for web browsing; no filtering, nothing fancy, just a pass-through of sorts to get around web filters.  That part I've got working.  The part I haven't had luck with is encrypting the browser-to-proxy connection.  I've found

Re: [squid-users] Tutorial for better authentication than basic

2017-05-04 Thread j m
Wow, this only showed up in my email yesterday.  I blame Yahoo. I did respond earlier basically saying I would need to connect from different IPs. From: Eliezer Croitoru <elie...@ngtech.co.il> To: 'j m' <acctforj...@yahoo.com>; squid-users@lists.squid-cache.org Sent: Wedn

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
<tommy.cradd...@bicgraphic.com> wrote: Hello, Yeah, that guide is for PFsense in particular, but you could run HAProxy by itself (say in a VM) and get the same result.  Just fwd those ports from your router to the HAProxy box. Thanks!  From: squid-users [mailto:squid-users-bounces@

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
, Tommy <tommy.cradd...@bicgraphic.com> wrote: Hello, Yeah, that guide is for PFsense in particular, but you could run HAProxy by itself (say in a VM) and get the same result.  Just fwd those ports from your router to the HAProxy box. Thanks!  From: squid-users [mailto:squid-users-bounces@

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
@lists.squid-cache.org]On Behalf Of j m Sent: Wednesday, May 03, 2017 2:44 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] HTTPS support   In any case, I'm finding SSH through proxy is undesirable or not possible.  I'm thinking shellinabox, which is insecure but run over a s

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
] HTTPS support On Wednesday 03 May 2017 at 18:37:36, j m wrote: > I cannot SSH into my home server from an organization that is apparently > blocking SSH connections, for whatever reason, intentional or not.  I am, > however, able to use a squid proxy that I run from my home server. So, redirec

Re: [squid-users] HTTPS support

2017-05-03 Thread j m
>Options" for the http_port directive (not the https_port directive!). This is helpful since I was trying to use https_port. From: Alex Rousskov <rouss...@measurement-factory.com> To: "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> Cc: j m <acctf

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
"service squid start".  This used to work, but it gives no error; it appears to immediately execute, but it's not running as a process.    However, if I run "squid -N -d 1 -D", it runs with no complaints. From: Eliezer Croitoru <elie...@ngtech.co.il> To: 'j m' &l

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
: Amos Jeffries <squ...@treenet.co.nz> To: squid-users@lists.squid-cache.org Sent: Monday, May 1, 2017 7:06 PM Subject: Re: [squid-users] Tutorial for better authentication than basic On 02/05/17 09:04, j m wrote: > Wow, I didn't find that one.  Not super secure, but better t

Re: [squid-users] Tutorial for better authentication than basic

2017-05-02 Thread j m
:06 PM Subject: Re: [squid-users] Tutorial for better authentication than basic On 02/05/17 09:04, j m wrote: > Wow, I didn't find that one.  Not super secure, but better than clear > text and I'm not too worried about someone sniffing my packets. > The security level with Digest depen

Re: [squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
Wow, I didn't find that one.  Not super secure, but better than clear text and I'm not too worried about someone sniffing my packets. From: Eliezer Croitoru <elie...@ngtech.co.il> To: 'j m' <acctforj...@yahoo.com>; squid-users@lists.squid-cache.org Sent: Monday, May 1,

[squid-users] Tutorial for better authentication than basic

2017-05-01 Thread j m
I'm using Ubuntu 16.04 Server in the home and would like to set up a proxy server for use from over the Internet.  The main purpose for this is to easily access a few web-devices on my LAN without using VPN, and at times to route web traffic from a remote location through my home ISP.  I do not